TLDR Tech / Practical
Package managers face serious security flaws
An examination of 25 popular package managers uncovered significant risks to code integrity and the presence of malicious package repositories. The research indicated that less than half of the analyzed package managers employ lockfiles that automatically detect tampering, and only two ensure the complete verification of every downloaded package.
Read the full story